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(57) Abstract 

An online coupon issuing and redemption system and method receives requests for coupons from consumers, presents advertisements 
and issues coupons to consumers electronically. The system presents advertisements before issuing the coupons, such that an issuer may 
be assured its targeted consumer is receiving its advertisements. The coupons are issued on a smart card, thereby eliminating a need for 
paper coupons. The coupons are digitally signed in order to prevent fraud. In order to prevent further fraudulent tampering of coupons, 
the redemption station includes a tamper-protected coprocessor for performing operations on the coupons. The system further includes 
capability for the redemption station to link to an issuing station for electronic reimbursements. 
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AUTHENTICATED ELECTRONIC COUPON ISSUING AND REDEMPTION 

The present invention relates to an electronic advertisement and 
coupon issuance and redemption. 

5 

Retailers and manufacturers often sponsor incentive programs for 
persuading consumers to buy their products. These incentives include 
discount coupons distributed to consumers whereby a consumer may redeem 
the coupon when purchasing an associated item. Such coupons are usually 
10 distributed in paper forms. 

The problems associated with paper coupons today are that the 
retailer and manufacturers who advertise cannot assure that consumers who 
use paper coupons have actually read the product advertisements which 
15 accompany the coupons. The advertisers do not have a way of knowing who 
is viewing their advertisements and cannot dynamically adjust the 
advertisement to fit the viewer's tastes and interests. 

In addition, many cases of fraud related to paper coupons are 
20 occurring today. For example, paper coupons are easily counterfeited. 

Some consumers commit fraud by redeeming coupons for merchandise they have 
not purchased. Some retailers also commit fraud by redeeming coupons for 
merchandise which consumers have not purchased. 

25 Manufacturers must rely on the cashiers and computer systems at 

retail establishments to assure that consumers who redeem coupons have 
actually bought the targeted product and that the coupons redeemed were 
not expired at the time of redemption. Retailers often rely on their 
cashiers to enforce coupon redemption rules. Other retailers rely on 

30 computerized systems to compare coupon bar codes to the consumer's 
purchases . 

U.S. patent number 4880964 by Donahue describes paper coupons with 
bar codes printed on them, and thus does not solve the deficiencies of 
35 paper coupons described above, U.S. patent number 5710866 by Christensen 
et al. describes electronically generated coupons but requires a database 
of customers and spent coupons which is costly to maintain. It also 
requires online connection to the database at redemption time to determine 
if the coupon is valid. 

40 

In accordance with the present invention, there is now provided a coupon 
issuing system for electronically presenting advertisements and generating 
coupons, said system comprising: at least one issuing station for 
generating and transmitting electronic advertisements and electronic 
45 coupons according to predetermined criteria; at least one customer station 
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to transmit from a user to the issuing station a request for an electronic 
coupon, for receiving electronic advertisements and electronic coupons 
from the issuing station, and for presenting the advertisement to the user 
for interaction with the user; at least one smart card for holding 
5 information including said electronic coupons; at least one smart card 
reader/writer for communicating information held in said at least one 
smart card to said at least one customer station; and at least one 
software program to monitor a status of the interaction of the user with 
the advertisement; whereby when said at least one software program detects 
10 a predefined status, said at least one software program transfers said 
electronic coupons to said smart card via said smart card reader/writer. 

Viewing the present invention from another aspect, there is now provided a 
system for redeeming electronic coupons comprising: at least one 
15 redemption station; and at least one smart card reader/writer linked to 
said redemption station; whereby said redemption station selects and 
updates via said at least one smart card reader /writer, coupons stored in 
a smart card, deleting expired coupons and also those matching purchased 
items . 

20 

Viewing the present invention from yet another aspect, there is now 
provided a method for advertising and issuing at least one coupon 
electronically, said method comprising: receiving a request for said 
electronic coupon from a consumer; generating at least one electronic 

25 advertisement and said electronic coupon; transmitting said electronic 
advertisement and said electronic coupon to a consumer's station for 
presentation to said consumer; monitoring said consumer's interaction with 
said advertisement; and transferring said electronic coupon to a smart 
card, if said consumer's interaction with said advertisement meets a 

30 predefined status. 

In a preferred embodiment of the present invention there is provided an 
online coupon issuing and redemption system. The issuing system includes 
an issuing station. The issuing station is generally comprised of a 

35 computer located usually at a manufacturer's site. The issuing station 
typically generates advertisements and coupons electronically. The 
issuing system also includes a consumer station, usually a computer and a 
smart card reader/writer generally located at the consumer site. The 
smart card reader/writer may be linked to the consumer computer either 

40 directly or via a LAN or other network connections. 

The issuing station and consumer station are linked via a 
communications network. When a consumer makes requests via the consumer 
station for coupons, the issuing station transmits the advertisement and 
45 coupons it generated to the consumer station. The issuing station also 
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has a capability of digitally signing the coupons. Digital signatures 
insure the authenticity of the coupons as well as that of the issuer and 
the issuing station. Also included in the transmission is a program 
having a capability to run on the consumer station. The program is 
5 responsible for making sure that the consumer absorbs the entire 

advertisement and transferring the coupons to a smart card via the smart 
card reader/writer linked to the consumer station. 

This assures the advertisers that a consumer actually perceives the 
10 advertisement for a product before receiving discount coupons. 

The redemption system generally comprises a redemption station, 
typically a computer, and a smart card reader/writer linked to the 
redemption computer. The redemption system is typically located at a 

15 purchasing site. When a consumer is ready to make a purchase, the 

consumer inserts the smart card having electronic coupons stored in it 
into the smart card reader/writer linked to the redemption station. The 
redemption system reads the coupons via the smart card reader/writer and 
matches the purchased items with coupons. The matched coupons are 

20 extracted from the smart card, so that they may not be used again. At the 
same time, the redemption system deletes any expired coupons stored in the 
smart card. 

The redemption system also may include a tamper -protected secure 
25 coprocessor. In order to protect a manufacturer from fraudulent merchants 
and customers, operations which assess the validity of coupons, operations 
which update, collect, store, or delete coupons may take place inside a 
tamper -protected hardware boundary. The hardware boundary is part of 
typical tamper-protected secure coprocessors and smart cards. 

30 

This provides a tamper -protected access to the coupons stored in the 
smart cards. 

Embodiments of the present invention may include a database of 
35 coupons stored in the issuing station. The database may include a list of 
coupons issued or already spent. When a consumer is ready to redeem the 
coupons, the redemption station links to the database and validates the 
coupons stored in the consumer's smart card by comparing the smart card 
coupons with a list of coupons in the database. Only the valid coupons 
40 matching the list in the database may be actually redeemed. 

In embodiments of the present invention there may be provided a 
communications link between a redemption station and an issuing station. 
Such a link is established when a merchant wants reimbursements from the 
45 manufacturer for the coupons the merchant redeemed to the consumers. 
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Typically the redemption computer sends electronic coupons which have been 
digitally signed to the issuing computer. The issuing computer validates 
the electronic signatures on the coupon. If the signatures are valid, the 
manufacturer reimburses the merchants for the valid coupons. This 
5 provides a mechanism for the manufacturer to electronically reimburse the 
merchants . 

Preferred embodiments of the present invention will now be described by 
way of example only, with reference to the accompanying drawings, in 
10 which: 

Figure 1 is an exemplary diagram illustrating a physical 
architecture of an issuing system embodying the present invention; 

15 Figure 2 is a flow diagram illustrating one possible logic flow of 

issuing software running on the issuing computer embodying the present 
invention; 

Figure 3 is a flow diagram illustrating one possible logic flow of 
20 advertisement viewing software running on the viewing computer embodying 
the present invention; 

Figure 4 is a flow diagram illustrating one possible logic flow for 
interaction between advertisement viewing software and issuing software; 

25 

Figure 5 is an illustrative example showing a physical layout of a 
redemption system architecture embodying the present invention; 

Figures 6 and 7 are a flow diagram illustrating one possible logic 
30 flow in the redemption system during a typical point of sale; 

Figure 8 is a flow diagram illustrating a possible logic flow in a 
typical daily coupon close-out; 

35 Figure 9 is an illustrative example showing a physical layout of a 

software -based redemption system embodying the present invention. 

Figure 1 is an exemplary diagram illustrating a physical 
architecture of an issuing system embodying the present invention. An 

40 authenticated electronic coupon issuing system shown in Figure 1 includes 
an issuing station, typically a computer 110 running issuing software 115; 
a viewing station, typically an advertisement viewing computer 120 running 
advertisement viewing software 123 which sends requests for coupons 125 to 
an issuing computer 110; an advertisement viewing computer 120 running 

45 advertisement applet software 13 0; an electronic advertisement 140; an 
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electronic coupon which is digitally signed 150; a dispensing smart card 
reader/writer 160; a customer's smart card 170 holding an electronic 
coupon 150. A ti^ical smart card may be a chip card having an integrated 
circuit that is resistant to physical tampering. An issuing station 
5 typically comprises a computer at a manufacturer or clearing house site. 
Likewise, a viewing station typically comprises of a computer at a 
customer site. A customer is typically a consumer who receives coupons 
electronically and makes purchases using the coupons. 

10 A dispensing smart card reader/writer 160 is attached to an 

advertisement viewing computer 120 and is accessible by advertisement 
applet software 13 0., 

Issuing software 115, advertisement viewing software 123, and 
15 advertisement applet software 13 0 are typically purchased from software 

vendors. An electronic advertisement 140 is supplied by an advertisement 
content vendor. A customer's smart card 170 may be purchased from a smart 
card vendor. Likewise, a customer's smart card reader /writer 160 may be 
supplied by a smart card reader /writer vendor. An issuing computer 110 
20 and an advertisement viewing computer 120 may be obtained from computer 
hardware vendors. An electronic coupon 15 0 is generated by issuing 
software 115. A request for coupons 125 is generated by advertisement 
viewing software 123 . 

25 Figure 2 is a flow diagram illustrating one possible logic flow of 

issuing software running on the issuing computer of the present invention. 
Initially in step 210, the issuing software awaits a request from an 
advertisement viewing computer. A request includes information about the 
customer, such as his interests (e.g., propensity for playing tennis), and 

30 demographics (e.g., a senior citizen). In step 220, the issuing software 
retrieves a customer's interest profile and demographics from a request. 
In step 230, the issuing software selects an electronic advertisement 
which matches a customer's interest profile and demographics. For 
example, if a customer is a senior citizen, the issuing software selects 

35 an electronic advertisement targeted at senior citizens, not one targeted 
at teenagers, in step 240, the issuing software generates an electronic 
coupon which is digitally signed. 

Digital signatures are generally created by piping a sender's 
40 private key and the contents of the message into an algorithm. The output 
of the algorithm is the digital signature. The recipient can verify the 
digital signature by using the sender's public key and the message. The 
digital signature is secure because it would be virtually impossible for 
another computer to produce the identical digital signature. Each user 
45 has the responsibility of protecting the private key. 
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In step 250, the issuing software transmits an electronic 
advertisement, advertisement applet software, and an electronic coupon to 
an advertisement viewing computer. The issuing software then waits for 
another request from the advertisement viewing software. 

5 

Figure 3 is a flow diagram illustrating one possible logic flow of 
advertisement viewing software running on the viewing computer of the 
present invention. In step 310, the advertisement viewing software awaits 
a request for a coupon from a customer. In step 315, the viewing software 

10 obtains information about a customer, such as his interests and 

demographics. The viewing software may obtain the information directly 
from a customer through a dialogue, or from a customer's smart card, or 
from a file on the viewing computer. In step 320, the viewing software 
includes a customer's interest profile and demographics with a request for 

15 a coupon, in step 325, the viewing software transmits a request for a 

coupon to an issuing computer. In step 33 0, the viewing software awaits a 
response from an issuing computer. If there is no response, the viewing 
software times out, in step 335, displays an error message and, in step 
310, awaits for another request from a customer. If there is a response 

20 from an issuing computer, the viewing software receives advertisement 

applet software, an electronic advertisement, and an electronic coupon as 
shown in step 340. In step 350, the viewing software then runs 
advertisement applet software. The software determines, in step 360, if 
the customer viewed an entire advertisement. In step 370, if the applet 

25 software times out or if a customer exited the software prematurely, the 
viewing software terminates the session and returns to wait for another 
request from a customer in step 310. In step 380, if the applet 
determines that a customer did view the entire advertisement, the applet 
software transmits an electronic coupon which is digitally signed to a 

30 customer's smart card via a dispensing smart card reader/writer. 

An example of viewing software may include a world wide Web (Web) 
page having a uniform resource locator (URL) address which a consumer may 
access via a web browser. The URL address would be located in the web 

35 server linked to an issuing station. The Web page may have a number of 
parameter fields as input fields which the consumer is required to fill. 
The Web page with the parameters may then be transmitted to the web server 
at the issuing station. The web server together with issuing software may 
then use the parameters to generate electronic advertisements and coupons, 

40 transmitting them with an applet software to the viewing software. The 
viewing software typically launches the applet software. The launched 
applet software displays the advertisements on the consumer station, 
controlling the station's interaction with the consumer. The applet 
software may also be responsible for transferring the coupons to the 

45 consumer's smart card. Furthermore, the applet software may provide 
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interactivity, for example, requiring that the consumer answer questions 
about the product or advertisement, to assure that the consumer is truly- 
absorbing the advertising information. 

5 Figure 4 is a flow diagram illustrating one possible logic flow for 

interaction between advertisement viewing software and issuing software. 
In step 420, an advertisement viewing computer requests an electronic 
coupon from an issuing computer. In step 43 0, an issuing computer 
transmits advertisement applet software, an electronic advertisement, and 

10 an electronic coupon which is digitally signed to an advertisement viewing 
computer. In step 440, an advertisement viewing computer runs applet 
software. The applet software displays an electronic advertisement. In 
step 450, the applet software determines how to proceed based on whether 
or not a customer viewed an entire advertisement. In step 460, if a 

15 customer does not view an entire electronic advertisement, the 

advertisement applet software terminates the session and awaits another 
request, step 410. If, however, a customer views an entire electronic 
advertisement, in step 470, the applet software rewards the customer by 
transmitting an electronic coupon which is digitally signed to a 

20 customer's smart card. The smart card is typically inserted into a 
dispensing smart card reader/writer. Furthermore, the advertisement 
applet software may be interactive, requiring that a customer answer 
questions about a product or advertisement, to assure that a customer is 
truly absorbing the advertising information. Secure protocols, tamper- 

25 protected hardware, or record keeping databases typical in electronic 
money systems may be employed to prevent consumers and retailers from 
double spending or duplicating the electronic coupons. A suitable example 
for such secure protocols are described in detail in M. Bellare et al . , 
"iKP - A Family of Secure Electronic Payment Protocols", July 12, 1995, 

30 available from IBM. 

Electronic coupons are not printed, therefore they cannot be printed 
over and over again, or photocopied. The number of electronic coupons a 
smart card may hold may be limited. 

35 

Figure 5 is an illustrative example showing a physical layout of a 
redemption system architecture embodying the present invention. An 
authenticated coupon redemption system as shown in Figure 5 comprises a 
redemption computer 510, a tamper -protected secure coprocessor 520, a 

40 redemption smart card reader /writer 53 0, a customer's smart card storing a 
digitally signed electronic coupon 150, and an issuing station. An 
issuing station is typically comprised of a computer 110 and is generally 
resident at a manufacturer or at a clearing house that performs the duties 
for a manufacturer or a group of manufacturers. A redemption smart card 

45 reader /writer 530 is typically attached to a redemption computer 510. A 
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tamper -protected secure coprocessor 520 is connected to a redemption 
computer 510 either directly or via a communications network. A 
redemption computer 510 may also be connected to an issuing computer 110, 
typically via phone line 570. 

5 

Figures 6 and 7 are a flow diagram illustrating a possible logic 
flow in the redemption system during a typical point of sale. In step 
610, a consumer inserts the smart card 170 Figure 1 into a redemption 
smart card reader /writer 530 Figure 5. The smart card includes electronic 

10 coupons which have been digitally signed 150 Figure 1. In step 620, the 
smart card sends a list of all coupons stored in it to a redemption 
computer 510 Figure 5. In step 630, a redemption computer forwards the 
list of coupons and optionally a list of items purchased to a tamper - 
protected secure coprocessor 520 Figure 5. In step 640, the tamper - 

15 protected secure coprocessor 520 Figure 5 examines the list of all 

coupons, and assembles a list of those which have expired. In step 650, 
the tamper -protected secure coprocessor 520 Figure 5 requests a redemption 
computer to send a command to a smart card to delete expired coupons. 
Next, in step 660, the tamper -protected secure coprocessor searches for 

20 non- expired coupons that match actual items purchased. If there are no 

matching items, in step 670, the tamper -protected secure coprocessor tells 
the redemption computer that no items matched the coupon list. If there 
are matching items, in step 680, the tamper-protected secure coprocessor 
assembles a list of matching items and valid coupons. In step 690, the 

25 coprocessor requests the redemption computer to send a command to the 

smart card to extract valid matching coupons. In step 695, the smart card 
sends the valid matching coupons to the tamper -protected secure 
coprocessor. 

30 In order to protect a manufacturer from fraudulent merchants and 

customers, operations which assess the validity of coupons, operations 
which update, collect, store, or delete coupons take place inside a 
tamper -protected hardware boundary 655. The hardware boundary is part of 
typical tamper-protected secure coprocessors and smart cards. A typical 

35 tamper -protected secure coprocessor may be a tamper-protected computing 

device having a microprocessor and memory in a tamper -protected enclosure, 
such as the IBM 4758. 

Figure 8 is a flow diagram illustrating a possible logic flow during 
40 a typical daily coupon close-out. In step 710, a redemption computer 510 
Figure 5 connects to the issuing computer 110 Figure 5 or clearing house 
computer. Such connection would generally occur at the end of the day, or 
at some appropriate period of time. In step 720, the redemption computer 
510 Figure 5 sends electronic coupons which have been digitally signed 150 
45 Figure 5 to the issuing computer 110 Figure 5. In step 730, the issuing 
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computer validates the electronic signatures on the coupons. In step 740, 
the clearing house reimburses the merchant for the valid coupons. 

Figure 9 is an illustrative example showing a physical layout of a 
5 software -based redemption system embodying the present invention. The 
embodiment shown in Figure 9 replaces the tamper -protected secure 
coprocessor 520 Figure 5 in the redemption computer 510 Figure 5 with a 
database of coupons 810 in the issuing computer 110 Figure 5. The 
database includes either a list of already spent coupons (so as to reject 

10 them if they are presented a second time) or a list of unspent coupons, 

from which it deletes coupons as they are presented for redemption. When 
a merchant connects to the issuing computer 110 to redeem the coupons, the 
issuing computer 110 searches the database 810 to determine if the coupons 
are valid. Only the valid coupons found in the database 810 may then be 

15 redeemed. 

While the invention has been particularly shown and described with 
respect to a preferred embodiment thereof, it will be understood by those 
skilled in the art that the foregoing and other changes in form and 
20 details may be made therein without departing from the scope of the 
invention. 
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Claims 

1. A coupon issuing system for electronically presenting advertisements 
and generating coupons, said system comprising: 

5 

at least one issuing station for generating and transmitting 
electronic advertisements and electronic coupons according to 
predetermined criteria; 

10 at least one customer station to transmit from a user to the issuing 

station a request for an electronic coupon, for receiving electronic 
advertisements and electronic coupons from the issuing station, and for 
presenting the advertisement to the user for interaction with the user; 

15 at least one smart card for holding information including said 

electronic coupons; 

at least one smart card reader /writer for communicating information 
held in said at least one smart card to said at least one customer 
20 station; and 

at least one software program to monitor a status of the interaction 
of the user with the advertisement; 

25 whereby when said at least one software program detects a predefined 

status, said at least one software program transfers said electronic 
coupons to said smart card via said smart card reader/writer. 

2. A system as claimed in claim 1, wherein said system further includes 
30 a user interface program for displaying information including request 

forms and the advertisements, whereby the advertisements are presented 
visually to the user via the customer station. 

3. A system as claimed in claim 2, wherein said user interface program 
35 comprises a Web browser running on the customer station. 

4. A system as claimed in claim 3, wherein said at least one software 
program includes a platform independent program downloadable dynamically 
from said issuing station, said at least one software progrcun further 

40 controlling displays in conjunction with said Web browser. 

5. A system as claimed in claim 1, wherein said issuing station 
digitally signs said electronic coupons before downloading said electronic 
coupons to said customer station. 

45 
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6. A system as claimed in claim 1, wherein said advertisements are 
updated over predefined intervals. 

7. A system for redeeming electronic coupons comprising: 

5 

at least one redemption station; and 

at least one smart card reader/writer linked to said redemption 
station; 

10 

whereby said redemption station selects and updates via said at 
least one smart card reader /writer, coupons stored in a smart card, 
deleting expired coupons and also those matching purchased items . 



15 8. A system as claimed in claim 7, wherein said system further includes 
at least one tamper -protected secure coprocessor, whereby operations which 
assess the validity of coupons including operations which update, collect, 
store, or delete coupons take place inside said tamper -protected secure 
coprocessor thereby preventing fraudulent tampering of said coupons. 

20 

9. A system as claimed in claim 7, wherein said system further includes 
at least one issuing station linked to said redemption station, whereby 
coupons collected by said redemption station are reimbursed by said at 
least one issuing station. 

25 

10. A system as claimed in claim 9, wherein said at least one issuing 
station includes a database for storing lists of coupons, whereby 
validation of redeemed coupons are performed by matching said redeemed 
coupons with said lists of coupons. 

30 

11. A method for advertising and issuing at least one coupon 
electronically, said method comprising: 

receiving a request for said electronic coupon from a consumer; 

35 

generating at least one electronic advertisement and said electronic 
coupon ; 



transmitting said electronic advertisement and said electronic 
40 coupon to a consumer's station for presentation to said consumer; 

monitoring said consumer's interaction with said advertisement; and 

transferring said electronic coupon to a smart card, if said 
45 consumer's interaction with said advertisement meets a predefined status. 
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12. A method as claimed in claim 11, wherein said method further 
includes the step of retrieving an interest and demographic profile for 
said consumer before the step of generating. 

5 13. A method as claimed in claim 11, wherein said step of generating 
includes digitally signing said electronic coupon. 

14. A method as claimed in claim 11, wherein said method further 
includes the steps of: 

10 

reading a list of said electronic coupon stored in said smart card; 

deleting from said smart card said electronic coupon which have 
expired; 

15 

matching valid said electronic coupon with purchased items; and 

extracting valid matching said electronic coupon, 

20 whereby said consumer's electronic coupon is redeemed at a 

purchasing location when said consumer purchases items associated with 
said electronic coupon stored in said smart card. 

15. The method according to claim 14, wherein said method further 
25 includes the steps of: 

establishing a connection to an issuing station; 

sending said electronic coupon to said issuing station; 

30 

validating said electronic coupon; and 

reimbursing a merchant for valid said electronic coupon, 

35 whereby said issuing station periodically reimburses merchants 

collecting said electronic coupon. 



40 
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610--— Consumer inserts smart card containing an electronic 
coupon wliicli tias been digitally-signed into redemption 
smart card reader/writer 



620 - 



Smart card sends list of all 
coupons to redemption 
computer 



630 - 



Redemtion computer sends list of all coupons and (optionally) 
list of items purchased to tamper-protected secure coprocessor 



tamper ■ 
protection y< 
boundary I 
655 



Tamper-protected secure 
coprocessor assembles list 
of expired coupons 



-640 



J J 



650 — ^ Tamper-protected secure coprocessor requests 
redemption computer to send command to 
smart card to delete expired coupons 



"T" 

® 

FIG. 6 
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710- 



redemption computer 
connects to issuing 
computer 



720 - 



redemption computer 
sends coupons to 
issuing computer 



730 - 



issuing computer 
validates signatures 
on coupons 



740 - 



issuing computer 
reimburses merctiant 
for valid coupons 



FIG, 8 
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